Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ElkEGp5wbdT8jl1n9A6Pu0wYMM0.roa
File: ElkEGp5wbdT8jl1n9A6Pu0wYMM0.roa (raw, json)
Hash identifier: X0Z0P5MfEZ+9RZkYWuuxD8kGzADym/fDfS2khFNozBk=
Subject key identifier: 12:59:04:1A:9E:70:6D:D4:FC:8E:5D:67:F4:0E:8F:BB:4C:18:30:CD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01969A471086FB753447648D5380D78EEE20
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ElkEGp5wbdT8jl1n9A6Pu0wYMM0.roa
Signing time: Sun 04 May 2025 07:51:10 +0000
ROA not before: Sun 04 May 2025 07:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 31.56.172.0/24 maxlen: 24
31.56.173.0/24 maxlen: 24
31.56.242.0/24 maxlen: 24
31.56.243.0/24 maxlen: 24
31.56.244.0/24 maxlen: 24
31.56.245.0/24 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.3.0/24 maxlen: 24
217.60.7.0/24 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.15.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:47:10:86:fb:75:34:47:64:8d:53:80:d7:8e:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 07:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1259041a9e706dd4fc8e5d67f40e8fbb4c1830cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:17:15:9c:b5:88:5f:f8:c5:19:3b:a3:d7:
9d:ca:9f:ae:f0:5e:23:8e:12:df:11:70:bb:80:ca:
4b:f5:46:51:d3:c5:e3:18:33:e8:ba:29:8b:e8:f5:
93:52:55:43:37:87:4c:79:dc:05:2f:d4:f1:35:ef:
32:05:89:2c:26:0b:8b:a0:91:dd:d8:c9:72:eb:42:
58:32:72:d5:3b:aa:0f:03:a4:78:0e:e5:79:10:d4:
d3:c1:9d:c4:e1:45:af:27:fc:41:5e:89:b3:36:50:
5f:04:49:eb:a2:b5:30:d8:9b:e2:17:d0:7b:4e:b3:
61:e1:dd:20:1f:c8:c6:c4:78:6a:4d:26:17:c9:b4:
5d:8d:38:4d:f3:19:c1:11:67:78:ad:4f:db:e5:ef:
08:cc:3d:75:2e:14:c5:0d:12:d8:26:b5:95:50:dc:
34:9a:8e:3c:7a:bf:92:b4:83:16:00:a6:5b:68:e3:
82:03:ab:a6:f5:77:1f:e3:6e:0d:a9:1b:45:3f:8f:
c9:ec:e7:e4:60:59:e9:90:6b:1f:ea:cd:5a:d4:13:
99:c5:27:2f:aa:20:35:de:18:c7:42:af:34:83:98:
cf:bb:e9:da:c8:1d:19:5c:83:e3:ce:93:48:08:ee:
86:e6:b4:61:1b:16:e2:20:0e:de:8b:6d:a6:66:67:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:04:1A:9E:70:6D:D4:FC:8E:5D:67:F4:0E:8F:BB:4C:18:30:CD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ElkEGp5wbdT8jl1n9A6Pu0wYMM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.172.0/23
31.56.242.0-31.56.245.255
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.36.0/22
217.60.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:84:ac:2a:4a:8b:83:8d:c9:b3:26:1f:12:c6:36:65:b7:37:
41:17:07:10:b3:a4:be:58:08:5e:f9:aa:4b:19:b5:8d:7a:d7:
2c:26:3e:f1:2b:5b:dc:4b:e3:ba:6f:5e:03:54:03:3f:89:bc:
ff:94:02:8d:05:ad:8c:e8:a1:11:f2:f9:67:b0:60:18:c8:ed:
fd:df:da:c3:92:f9:98:01:5e:a9:ee:78:7f:f0:fb:9b:74:2b:
8f:f6:51:76:8b:8c:3f:8d:7f:a6:e2:e8:51:4d:8a:e9:32:2c:
34:fb:a9:35:49:6b:87:bb:6c:72:d1:2a:75:e8:97:4c:af:3d:
d4:f3:91:1f:3a:50:a8:b3:83:f8:d7:21:4d:bf:85:1b:7d:0b:
64:b9:be:c6:e8:dc:d1:4b:ae:dc:2b:32:cb:39:06:34:e2:6c:
14:a7:2e:f6:bb:8a:0a:86:fe:36:f1:11:e4:73:ce:b0:d7:fc:
5d:d4:6a:20:ff:52:d6:a6:f0:0d:ff:9f:3d:fe:55:da:28:87:
3f:f9:35:b0:11:c0:dc:03:4f:12:7e:17:84:ec:e5:55:c5:b5:
58:45:aa:3d:09:ec:35:c3:02:b5:ad:11:19:78:93:0d:e7:d1:
32:65:9d:b5:dd:5b:ab:b3:d6:8b:81:12:18:48:7c:8f:aa:68:
9b:65:d3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:35:22 2025 by rpki-client